Privacy Policy

Effective 18 August 2026

1. Who we are

Safory sells eSIM data plans through the Safory mobile app and this website. This policy explains what we collect, why, who we share it with, and what you can ask us to do about it. It applies to the app and to any Safory page you open in a browser.

2. What we collect

Your account

The first time you open the app it creates a guest account tied to that installation. It has no name, email or phone number attached — it exists so your purchases belong to something. You can browse, buy and install an eSIM at this stage without giving us any personal details.

If you choose to create a real account, we then hold:

• your name and email address;
• a password, stored only as a cryptographic hash we cannot reverse (not applicable if you use Apple or Google);
• your phone number, only if you enter one;
• a profile picture, only if you upload one or pick one of our built-in avatars.

What you buy and what you use

• Orders — the plans you bought, the price, and when.
• eSIMs — the ICCID and activation details of each eSIM issued to you, when it activates and expires.
• Data usage — how much data a plan has left. We fetch this figure from our connectivity provider so the app can show it to you. It tells us how much data an eSIM has consumed. It does not tell us which websites, apps or services you use, who you contact, or where you are. We have no access to the content of your traffic.

Payments

Payments are processed by our payment providers (currently FIB and Nass). Your card or bank credentials go to them directly — they never pass through, and are never stored on, our servers. We keep the amount, currency, status and the provider's reference so we can match a payment to your order, support you if something goes wrong, and meet our accounting obligations. If you use the Safory wallet, we keep its balance and the history of what moved in and out.

Preferences and technical data

• your chosen app language and display currency;
• standard server logs — IP address, the request, and a timestamp — kept for security and debugging;
• app and device version information sent with requests so we can diagnose problems.

3. Signing in with Apple or Google

If you use Sign in with Apple or Sign in with Google, that provider confirms who you are and passes us a stable identifier, your name, and an email address. We never receive your Apple or Google password.

Apple's Hide My Email gives us a relay address instead of your real one. That works perfectly well with us — we simply use whatever address Apple provides, and mail sent to it is forwarded by Apple. You can turn the relay off from your Apple ID settings at any time.

Apple and Google send us your name only the first time you authorise the app. We keep it so your account is not left nameless.

4. Sharing an eSIM by link

The app and our staff can generate a share link for an eSIM, so the person who will actually use it can install it without having an account. Anyone holding that link can see the installation details and the plan's remaining data. The link is the key — treat it like one and only send it to the intended person. Links expire automatically once the eSIM does, can be revoked at any time, and are deleted from our systems after they die.

5. Who we share your information with

We share only what is needed to deliver what you bought:

• Our eSIM connectivity provider — receives the order so the eSIM can be issued, and returns its activation details and usage figures.
• Payment providers — to take and, if needed, refund payment.
• Apple or Google — if you choose their sign-in, and Google additionally for the usage analytics described in section 6.
• Our hosting provider — which stores the data on our behalf.
• Authorities — only where the law actually requires it of us.

We do not sell or rent your personal data, and we do not share it for advertising.

6. Usage analytics and crash reports

We use Google Analytics for Firebase to understand how the app is used — which screens people reach, where a purchase gets abandoned, which errors happen. It tells us that an account did something, using the numeric account identifier we already hold. We never send your name, email address or phone number to it, and Google's terms prohibit us from doing so.

What analytics does not see:

• the websites or apps you use over your eSIM, or anything about your traffic;
• your location;
• your messages, contacts or files.

You can turn this off. In the app, go to Account → Terms & privacy and switch off Share usage data. That stops collection at the source rather than merely hiding it, and the rest of the app carries on working exactly as before.

Crash reports

We use Firebase Crashlytics so that when the app breaks we find out and can fix it. A crash report contains the technical state of the app at that moment — the error, a stack trace, your device model and OS version, and the same numeric account identifier. It contains nothing you typed and nothing about your eSIM traffic.

This is a separate switch from usage data, under Send crash reports in the same screen, because the two are different things: one tells us what people do, the other tells us what is broken.

7. How long we keep it

You can delete your account at any time from Account → Delete account in the app. Doing so removes your profile — your name, email, phone number and profile picture — and signs you out everywhere.

To be straight with you about one thing: records of orders, payments and issued eSIMs are kept after deletion, with your identity detached from them. They are commercial and accounting records of a real transaction with a supplier, and we are required to be able to account for them. They no longer identify you. Any remaining wallet balance is forfeited when you delete your account, and the app warns you before you confirm.

8. Your rights

You can ask us to:

• tell you what personal data we hold about you, and give you a copy;
• correct anything inaccurate — most of it you can edit yourself in the app;
• delete your account, which you can also do yourself at any time;
• restrict or object to a particular use of your data.

Write to info@saforyesim.com and we will respond. We may need to confirm your identity first, so that nobody else can make these requests about you.

9. Security

Traffic between the app and our servers is encrypted in transit. Your session token is held in your device's secure keychain or keystore, not in ordinary app storage. Passwords are stored only as hashes. Credentials and other secrets on our side are encrypted at rest. No system is perfectly secure, but we take this seriously and design accordingly.

10. Children

Safory is not intended for children under 13, and we do not knowingly collect their personal data. If you believe a child has given us personal information, contact us and we will remove it.

11. Changes to this policy

If we change this policy we will update the effective date at the top, and for anything significant we will tell you in the app. Continuing to use Safory after a change means you accept the updated policy.

12. Contact us

Questions, requests or complaints about privacy: info@saforyesim.com.